services:
  tailscale:
    image: tailscale/tailscale:stable
    container_name: tailscale-static
    hostname: static
    environment:
      - TS_AUTHKEY=${TS_AUTHKEY}
      - TS_STATE_DIR=/var/lib/tailscale
      - TS_SERVE_CONFIG=/config/tailscale-serve-config.json
    volumes:
      - tailscale-static-state:/var/lib/tailscale
      - /dev/net/tun:/dev/net/tun   # shared interface across all Tailscale instances
      - ./config:/config
      - ./shared:/shared
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    restart: unless-stopped


volumes:
  tailscale-static-state: